Senior Compliance Analyst

This is a fully remote position, open to applicants in Australia.

📋 Description

• Perform compliance evaluations in accordance with ISO 27001, ISM, PSPF, RFFR, contractual responsibilities, and other pertinent regulatory standards.

• Offer expert advice on compliance requirements, risk management, and controls to various stakeholders within the organization.

• Keep an updated register of relevant legal, regulatory, contractual, and policy obligations.

• Track modifications to security, regulatory, and governmental frameworks, evaluate their impacts, and facilitate the implementation of new requirements.

• Collaborate with business and technology teams to deploy, review, and improve security controls and compliance measures.

• Lead assurance reviews, audits, and assessments of control effectiveness, identifying compliance deficiencies and coordinating corrective actions.

• Plan and conduct assurance reviews to assess control effectiveness and compliance maturity.

• Generate compliance reports, dashboards, metrics, and updates for governance committees.

• Assist with customer security evaluations, compliance questionnaires, audits, and regulatory reporting tasks.

• Develop and sustain compliance policies, standards, procedures, and governance documentation.

• Analyze compliance data, recognize emerging risks and trends, and contribute to initiatives aimed at continuous improvement.

⛳️ Requirements

• At least 7 years of experience in IT compliance, information security, risk management, or a related domain.

• In-depth knowledge of risk management frameworks, methodologies, and governance principles.

• Proven experience working with ISO/IEC 27001, Information Security Manual (ISM), Protective Security Policy Framework (PSPF), and other governmental, regulatory, or industry security standards.

• Experience in conducting security assessments, audits, certification programs, and assurance-related activities.

• Capability to interpret legal agreements, contractual obligations, and compliance requirements.

• Strong analytical, reporting, documentation, and problem-solving abilities.

• Exceptional communication and stakeholder engagement skills.

• Excellent organizational and project management capabilities.

• High standards of integrity, professionalism, and accountability.

• A proactive, collaborative, and solution-oriented mindset.

• Experience in highly regulated sectors such as government, financial services, healthcare, or critical infrastructure.

• Familiarity with AI governance, emerging technology risks, and associated compliance considerations.

• Experience overseeing ISO 27001 certification and security accreditation processes.

• Tertiary qualifications in Information Security, Cyber Security, Computer Science, Technology, Risk Management, or a related field are desirable.

• CRISC, CISM, or CISA certification is preferred.

• ISO 31000 Risk Management certification is advantageous.

• ISO 27001 Lead Auditor certification is beneficial.

🏝️ Benefits

• Enjoy a work-life balance with no weekend shifts.

• Opportunity to acquire additional annual leave.

• Access to discounted health insurance.

• Options for novated car leasing.

• Paid parental leave.

• Programs recognizing long service.

• Career advancement opportunities across APM's varied health and human services brands.

• Continuous learning and professional development support.

• A supportive, collaborative, and inclusive workplace culture.